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AuthenticationJn,di^^^^^^ 

Butler Lampson, Martin AbadI, Michael Burrows, Edward Wobber 

November 1992 ACM Transactions on Computer Systems (TOCS), volume lo issue 4 

Publisher: ACM Press 

Full text available: '^^(i.fiSJLMa) Additional Information: M.cJtation., ibstrad, r§fer$.a<?es, c 

We describe a theory of authentication and a system that implements it. Our theory is based or 
relation between principals. A simple principal either has a name or is a communication channe 
adopted role or delegated authority. The theory shows how to reason about a principars author 
speak for; authenticating a channel is one important application. We ... 

Keywords: certification authority, delegation, group, interprocess communication, key distribu 
role, secure channel, speaks for, trusted computing base 



2 AuthenticMionjn.dJMr^^^^ 

Butler Lampson, Martin Abadi, Michael Burrows, Edward Wobber 
^ September 1991 ACM SIGOPS Operating Systems Review , Proceedings of the thirteenth Al 

principles SOSP '91, Volume 25 Issue 5 
Publisher: ACM Press 

Full text available: ^adf(2.33 M.B1 Additional Information: M.C!tatLQ.[L abstract references, c. 

We describe a theory of authentication and a system that implements it. Our.theory is based or 
relation between principals. A simple principal either has a name or is a communication channe 
adopted role or delegation of authority. The theory explains how to reason about a principal's a 
it can speak for; authenticating a channel is one important application. We use the th ... 

3 Obrtvious signature-based envelope 
i& Ninghui Li, Wenliang Du, Dan Boneh 

^ July 2003 Proceedings of the twenty-second annual symposium on Principles of disti 

Publisher: ACM Press 

Full text available: ' g|Ddf(874.99 KB) Additional Information: full citation , absirad. fererences, c 

Exchange of digitally signed certificates is often used to establish mutual trust between strange 
business transactions. Automated Trust Negotiation (ATN) is an approach to regulate the flow o 
exchange. Previous work on ATN are based on access control techniques, and cannot handle cy 
show that the problem can be modelled as a 2-party secure function evaluation (SFE) pr ... 
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* Securing.lhe..gjobaL.re^^^ 
Wait Curtis, Lori Sinton 

March 1999 International Journal of Network Management, volume 9 issue i 
Publisher: John Wiley & Sons, Ina 

Full text available: ■^pdft982.14.KBj Additional Information: M.Qitatip.0-, abstract, index. ter.ms 

Electronic commerce Is Inevitable and will reshape our lives, but before true electronic commen 
necessary to secure your enterprise against outside attacks on its electronic Information and pn 
information. Copyright © 1999 John Wiley & Sons, Ltd. 

^ Enc0plion and.Secu^^^ 

Gerald J. Popek, Charles S. Kline 

December 1979 ACM Computing Surveys (CSUR), volume ii issue 4 
Publisher: ACM Press 

Full text available: M pdf(Z50 MBl Additional Information: &!!..cjtetLon, Merences, .citings. .inc| 



® Astrolabe: A robust and scalable technology for distributed system monitoring, mana g em e 
Robbert Van Renesse, Kenneth P. Birman, Werner Vogels 

May 2003 ACM Transactions on Computer Systems (TOCS), volume 21 issue 2 
Publisher: ACM Press 

Full text available: '^p.dfCML§.2..KBJ Additional Information: feLcMtJon, abstract, references, c. 

Scalable management and self-organizational capabilities are emerging as central requirements 
dynamic, distributed applications. We have developed an entirely new distributed information nr 
collects large-scale system state, permitting rapid updates and providing on-the-fly attribute ag 
application to locate a resource, and also offers a scalable way to track sys ... 

Keywords: Aggregation, epidemic protocols, failure detection, gossip, membership, publish-su 



^ Tgwgid ajTjo^ inistering data 

ByungHoon Kang, Robert WilenskyO 
^ January 2001 Proceedings of the 1st ACM/IEEE-CS joint conference on Digital libraries 

Publisher: ACM Press 

Full text available: ^,Ddft3M.Q8 KB} Additional Information: fuJl citation, abstract references, ic 

We describe a model of self-administering data. In this model, a declarative description of how 
object, either by a user or by a data input device. A widespread infrastructure of self-administe 
handlers are responsible for carrying out the specifications attached to the data. Typically, the s 
data should be transferred, how it should be incorporated when it i ... 

Keywords: asynchonpus collaboration, data access model, data management, distributed file s 
update propagation, self-administering data 
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Constantinos F. Grecas, Sotirios I. Maniatis, lakovos S. Venieris 
April 2003 Mobile Networks and Applications, volume 8 issue 2 
Publisher: Kluwer Academic Publishers 

Full text available: ■^i)dfMPZ.24.KBj Additional Information: fJlLcitatipn, abstracL references, ir 

The logic ruling the user and network authentication as well as the data ciphering in the GSM ai 
transferring of the parameters employed in these processes, by transactions between three noc 
SIM, the visited MSC/VLR, and the AuC, which is attached to the HLR in most cases. The GPRS 
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of the GSM's philosophy regarding the user/network authentication and the data ciphe 
Keywords: PKIs, PmNs, asymmetric cryptography 



A security..archjMc 

l^icliael K. Reiter, Kenneth P. BIrman, Robbert van Renesse 

November 1994 ACM Transactions on Computer Systems (TOCS), Volume 12 issue 4 
Publisher: ACM Press 

Full text available: ■^pdf(2,50.ry1Bi Additional Information: yLcrtatipn, abstract, references, c 

Process groups are a common abstraction for fault-tolerant computing in distributed systems. V 
the process group into a security abstraction. Iritegral parts of this architecture are services tha 
cryptographic key distribution. Using replication only when necessary, and introducing novel re| 
have constructed these services both to be easily defensible against atta ... 

Keywords: key distribution, multicast, process groups 



10 Smart Cards and Biometrics: The cool way to make secure transactions 
David Corcoran, David Sims, Bob Hillhouse 
March 1999 Linux Journal 
Publisher: Specialized Systems Consultants, Inc. 

Full text available: fS) html(22.95 KB) Additional Information: fi^ll cjtqtiQp. ind^X tQrpns 



11 Computer security (SEC): Fair certified e-mail delivery 
Aleksandra Nenadid, Ning Zhang, Stephen Barton 

IVIarch 2004 Proceedings of the 2004 ACM symposium on Applied computing 
Publisher: ACM Press 

Full text available: ' g^ r>df(179.18 KB) Additional Information; full citalion , abstract, references. i£ 

Communication by e-mail has become a vital part of everyday business and has replaced most 
Important business correspondence may require certified e-mail delivery, analogous to that pro 
presents a novel certified e-mail delivery protocol that provides non-repudiation of origin and n< 
protect communicating parties from each other's false denials that the e-mail has ... 

Verification and security: Policy-hiding access control in open environment 
JIangtao Li, Ninghui Li 

July 2005 Proceedings of the twenty-fourth annual ACM SIGACT-SIGOPS symposium 
PODC '05 

Publisher: ACM Press 

Full text available: ^pdf{247J2 KB) Additional Information: M.citatLon, abstract^ references, jr 

In trust management and attribute-based access control systems, access control decisions are I 
identity) of the requester: Access is granted if Alice's attributes in her certificates satisfy Bob's i 
a policy-hiding access control scheme that protects both sensitive attributes and sensitive polici 
certified attribute values satisfy Bob's policy, without Bob learning any ... 

Keywords: access control, automated trust negotiation, cryptographic commitment, cryptogra 
privacy, secure function 



Digital signatures with RSA and other public-key cryptosystems 
Dorothy E. Denning 
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April 1984 Communications of the ACM, volume 27 issue 4 
Publisher: ACM Press 
Full text available: ' Ppdfi(374.39 KB) Additional Information: fuH citation, references, citings, j 



Keywords: cryptanalysis, cryptographic, hashing, homomorphism, protocol 



^* PrMjcM b^^^ and proactive recovery 

^ Miguel Castro, Barbara Liskov 

November 2002 ACi^ Transactions on Computer Systems (TOCS), volume 20 issue 4 

Publisher: ACIVI Press . 

Full text available: ^.pdfil.,63 MBJ ' Additional Information: MLcjtatiQ.n. abstract mfgieacgs, c 

Our growing reliance on online services accessible on the Internet demands highly available sys 
interruptions. Software bugs, operator mistakes, and malicious attacks are a major cause of sei 
arbitrary behavior, that is, Byzantine faults. This article describes a new replication algorithm, E 
systems that tolerate Byzantine faults. BFT can be used in practice to implement re ... 

Keywords: Byzantine fault tolerance, asynchronous systems, proactive recovery, state machin 



15 A secure multicast protocol with copyright protection 

^ Hao-hua Chu, Lintian Qiao, Klara Nahrstedt, Hua Wang, Ritesh Jain 

^ April 2002 ACM.SIGCOMM Computer Communication Review, volume 32 issue 2 

Publisher: ACM Press 

Full text available: "^pdlvSOJ. J7.KBJ Additional Information: fiijLcitatjpn. abstract, references, c 

We present a simple, efficient, and secure multicast protocol with copyright protection in an op( 
a wide variety of multimedia applications that can benefit from using our secure multicast proto 
multicast, or highly secure military intelligence video conference. Our secure multicast protocol 
It can run in any open network environment. It does not rely on any sec ... 

Keywords: copyright protection, key distribution, multicast security, watermark 



16 Secret key distribution protocol using public kev cryptography 
Amit Parnerkar, Dennis Guster, Jayantha Herath 

October 2003 Journal of Computing Sciences in Colleges, volume 19 issue 1 
Publisher: Consortium for Computing Sciences in Colleges 

-Full text available: ' ^Ddf(74.93 KB) Additional Information: full citation , abstract, references, jr 

This paper presents the description and analysis of a protocol, which uses hybrid crypto algorith 
168-bit key is used to generate the secret key. This secret key is transferred with the help of pi 
process is accomplished by using the message digest algorithm MD5. This protocol uses mutual 
have to authenticate themselves via a third trusted certificate authority (CA). Th ... 

Data integrity: The HP time vault service: exploiting IBE for timed release of confidential ip' 
Marco Casassa Mont, Keith Harrison, Martin Sadler 

May 2003 Proceedings of the 12th international conference on World Wide Web 

Publisher: ACM Press 

Full text available: ^.pdfigSO J7J<Bl Additional Information: M citatLQil abstract referencgs, ir 

Digital information is increasingly more and more important to enable interactions and transact 
leakages of sensitive information can have harmful effects for people, enterprises and governm 
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dealing with timed release of confidential information and simplifying its access once public: it i: 
and day-to-day life.We introduce the "HP Time Vault Service", based on the emerging ... 

Keywords: disclosure policies, identifier-based encryption, privacy, security, timed-release, W€ 



* Escrow^ services ^^^^ 

Bill Home, Benny Pinkas, fomas Sander 

October 2001 Proceedings of the 3rd ACM conference on Electronic Commerce 
Publisher: ACM Press 

Full text available: ^odff265.69 KB) Additional Information: full citation, abstract, references, c 

Distribution of content, such as music, remains one of the main drivers of P2P development. Su 
receiving a lot of attention from the content industry as a viable business model for P2P contend 
such services face is that users may choose to redistribute content outside the community of sl 
piracy. Digital Rights Management (DRM) systems typically employ tamper resistance te ... 

19 A secure infrastructure for service discovery and access in pervasive computing 
Jeffrey Undercoffer, Filip Perich, Andrej Cedilnik, Lalana Kagal, Anupam Joshi 
April 2003 Mobile Networks and Applications, volume 8 issue 2 
Publisher: Kluwer Academic Publishers 

Full text available: ^pdf(3Q8.34 KB) Additional Information: full citation, abstract, references, c 

Security is paramount to the success of pervasive computing environments. The system presen 
and security infrastructure that goes far in advancing the goal of anywhere-anytime computing, 
and utilize services in heterogeneous networks. We provide a service registration and discovery 
of service management. The system is built upon a simplified Public Key Infrastructure t ... 

Keywords: distributed services, extensible markup language, pervasive computing, security, s 



20 Research track paper: Anonymity-preserving data coHection 

Zhiqiang Yang, Sheng Zhong, Rebecca N. Wright 
^ August 2005 Proceeding of the eleventh ACM SIGKDD international conference on Knov 

Publisher: ACM Press 

Full text available: ^pdf(817.67 KB) Additional Information: full citation , abstract, references. j£ 

Protection of privacy has become an important problem in data mining. In particular, individual; 
their data, frequently resulting in individuals either refusing to share their data or providing ina 
collection can affect the success of data mining, which relies on sufficient amounts of accurate ( 
Random perturbation and randomized response techniques can provide some I ... 

Keywords: anonymity, data collection, data mining 
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